Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.cer
File:                     215EFBF4ED052171AF3D905A95BF8D33E800A9FE.cer (raw, json)
Hash identifier:          J+YQh9qdUJ7NHcHliW58c6i3goJyg5REe29vujDyZY8=
Subject key identifier:   21:5E:FB:F4:ED:05:21:71:AF:3D:90:5A:95:BF:8D:33:E8:00:A9:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       065D24942D58A6631601E26DE5547D27A780692F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jul 2026 19:56:36 +0000
Certificate not after:    Thu 08 Jul 2027 20:01:36 +0000
Subordinate resources:    AS: 270876
                          IP: 138.94.168.0/22
                          IP: 2804:72cc::/32
Validation:               Failed, certificate revoked on Fri 17 Jul 2026 01:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5d:24:94:2d:58:a6:63:16:01:e2:6d:e5:54:7d:27:a7:80:69:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  9 19:56:36 2026 GMT
            Not After : Jul  8 20:01:36 2027 GMT
        Subject: CN=215EFBF4ED052171AF3D905A95BF8D33E800A9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:62:84:2a:b7:f3:8d:f3:f0:40:a4:13:b6:
                    45:00:7b:8e:57:af:5b:a9:17:72:4c:86:ad:2f:8f:
                    8e:90:7b:3d:ec:d9:65:e1:26:f5:74:b9:39:df:ad:
                    b4:a7:77:2b:18:0f:e8:1a:18:dc:c4:57:a6:5e:72:
                    01:bf:d3:4f:d5:c7:ef:69:82:23:fe:30:47:1f:96:
                    d8:74:c9:4c:89:b6:25:cf:f1:73:94:25:15:93:86:
                    80:38:9b:53:20:07:a4:ca:8e:c1:36:1e:8b:d7:21:
                    c7:c0:60:de:00:e0:45:bd:fd:ef:fa:2e:f0:86:6d:
                    aa:dd:de:fd:3e:7b:52:82:ab:65:03:43:21:54:9c:
                    a1:d0:4c:6c:9c:f9:a9:dc:1d:38:a0:7f:9e:14:7a:
                    20:6e:c6:8f:18:77:c8:a1:e1:ed:11:7f:fb:9f:d9:
                    12:33:1c:30:13:7a:a8:25:b7:a6:13:6e:03:9c:74:
                    b5:bb:b8:0d:de:0b:9f:8c:cb:8a:f5:e5:d5:c0:9e:
                    e9:a5:8d:63:10:b8:65:8c:a2:6d:cc:4a:cc:94:07:
                    46:02:21:34:9c:fa:22:05:e2:79:46:f4:5d:8b:e0:
                    74:87:26:70:46:b7:04:fb:b1:28:d3:79:d6:58:9b:
                    59:26:e7:fa:d7:4b:45:ad:8e:77:1d:0b:25:ee:ad:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:5E:FB:F4:ED:05:21:71:AF:3D:90:5A:95:BF:8D:33:E8:00:A9:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.168.0/22
                IPv6:
                  2804:72cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270876

    Signature Algorithm: sha256WithRSAEncryption
         23:db:5b:9a:db:59:22:d0:05:0b:88:e3:20:fe:2a:9a:65:4e:
         8d:61:fb:2a:e9:b1:46:53:a5:42:89:59:c7:9c:d7:f4:e5:3b:
         90:34:0d:16:b0:bb:18:80:6f:8d:24:7b:f4:a5:9d:bd:48:8c:
         dc:27:39:e4:47:87:29:44:0c:fb:cf:b1:b4:93:79:c0:29:91:
         a0:0f:ea:e7:01:eb:4f:53:fd:67:59:99:e1:9e:7a:14:47:29:
         ce:35:44:2c:b3:ab:9c:f7:bd:80:66:4c:20:03:0b:95:db:47:
         cf:84:7d:95:d7:b6:63:f3:79:e4:02:d7:1f:67:b3:4b:7f:11:
         19:4d:cd:58:73:6f:7c:59:eb:69:13:e5:2d:29:eb:64:83:12:
         68:47:aa:39:fe:bd:7b:64:a9:e7:ae:77:c8:08:ea:d0:46:f1:
         13:3e:63:e5:21:4e:a6:16:f3:e9:3e:14:62:42:3e:b3:c6:a0:
         52:61:10:14:9e:a4:83:68:26:44:a6:b0:7b:63:d8:8f:74:90:
         c9:42:c2:68:06:e3:f1:6c:39:3d:f2:77:cd:1c:fd:de:95:ec:
         9e:36:37:57:c9:21:16:d9:af:6c:92:7d:bc:4f:6a:62:aa:56:
         15:6e:3d:1c:d3:f1:60:2f:55:bc:7c:de:b8:05:82:13:f8:3e:
         f6:57:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:31:06 2026 by rpki-client